Close remaining web gaps: rich profile, login history, lightbox/slider, flash client, admin chatlog/DJ/chart/WYSIWYG, niche API

- Rich profile (/u/[username]): wallet (credits/duckets/diamonds), friends
  grid (messenger_friendships), and owned rooms sections.
- Login history: new website_login_logs table (model + migration 0007),
  recorded on every successful sign-in (ip + user-agent), surfaced on a new
  /settings/sessions page (with failed-attempt list from failed_logins).
- Photos lightbox + home article slider (client components, no Swiper dep).
- /client/flash launcher (SSO ticket like the Nitro page).
- Admin: private chatlogs section in /admin/logs, /admin/radio/moderation
  (shout moderation), a "users by rank" inline bar chart on the dashboard,
  and a TinyMCE rich-text editor on the article admin forms.
- Niche API: /api/values/[id], /api/guilds(+/[id]), /api/radio/auto-play.

Verified live (prod, amx_test): login recorded → /settings/sessions shows
it with device; profile renders wallet/friends/rooms; dashboard chart +
private-chat logs + /client/flash + /api/guilds all OK. Reverted test data.
tsc 0, vitest 49/49, next build 0.

src/app/admin/logs/page.tsx

@@ -7,7 +7,10 @@ const CRITICAL = new Set(["critical", "error", "danger"]);
 
 // chatlogs_room and commandlogs are @@ignore'd in the schema (no PK), so Prisma
 // generates no delegate for them — they are read via $queryRaw against the real
-// emulator columns. alert_logs has a proper delegate (prisma.alertLogs).
+// emulator columns. chatlogs_private has a delegate (prisma.chatlogsPrivate) but
+// is read here via $queryRaw too, mirroring the room-chat section and selecting
+// defensively so a column mismatch degrades to an empty list rather than a 500.
+// alert_logs has a proper delegate (prisma.alertLogs).
 
 type ChatlogRoomRow = {
   room_id: number;
@@ -17,6 +20,13 @@ type ChatlogRoomRow = {
   timestamp: number;
 };
 
+type ChatlogPrivateRow = {
+  user_from_id: number;
+  user_to_id: number;
+  message: string;
+  timestamp: number;
+};
+
 type CommandlogRow = {
   user_id: number;
   timestamp: number;
@@ -50,6 +60,21 @@ export default async function AdminLogs() {
     chatlogs = [];
   }
 
+  // Private (whisper) chat. Defensive SELECT + try/catch — the table may be
+  // absent or have differing columns on some emulators, in which case we show
+  // an empty section instead of crashing the page.
+  let privateChatlogs: ChatlogPrivateRow[] = [];
+  try {
+    privateChatlogs = await prisma.$queryRaw<ChatlogPrivateRow[]>`
+      SELECT user_from_id, user_to_id, message, timestamp
+      FROM chatlogs_private
+      ORDER BY timestamp DESC
+      LIMIT 50
+    `;
+  } catch {
+    privateChatlogs = [];
+  }
+
   let commandlogs: CommandlogRow[] = [];
   try {
     commandlogs = await prisma.$queryRaw<CommandlogRow[]>`
@@ -81,6 +106,7 @@ export default async function AdminLogs() {
 
       <div className="admin-stats">
         <StatusCard label="Room chat" value={chatlogs.length} icon="💬" />
+        <StatusCard label="Private chat" value={privateChatlogs.length} icon="🔒" />
         <StatusCard label="Commands" value={commandlogs.length} icon="⌨️" />
         <StatusCard label="Alerts" value={alertLogs.length} icon="🔔" />
       </div>
@@ -117,6 +143,36 @@ export default async function AdminLogs() {
         )}
       </section>
 
+      <section className="card" style={{ marginBottom: "1.5rem" }}>
+        <h3 style={{ marginTop: 0 }}>Private chat ({privateChatlogs.length})</h3>
+        {privateChatlogs.length === 0 ? (
+          <p className="muted">No private chat logs.</p>
+        ) : (
+          <div style={{ overflowX: "auto" }}>
+            <table>
+              <thead>
+                <tr>
+                  <th>When</th>
+                  <th>From</th>
+                  <th>To</th>
+                  <th>Message</th>
+                </tr>
+              </thead>
+              <tbody>
+                {privateChatlogs.map((c, i) => (
+                  <tr key={`${c.timestamp}-${c.user_from_id}-${c.user_to_id}-${i}`}>
+                    <td className="muted">{fromUnix(c.timestamp)}</td>
+                    <td>{String(c.user_from_id)}</td>
+                    <td>{c.user_to_id ? String(c.user_to_id) : "—"}</td>
+                    <td>{c.message}</td>
+                  </tr>
+                ))}
+              </tbody>
+            </table>
+          </div>
+        )}
+      </section>
+
       <section className="card" style={{ marginBottom: "1.5rem" }}>
         <h3 style={{ marginTop: 0 }}>Commands ({commandlogs.length})</h3>
         {commandlogs.length === 0 ? (